Lucene search
K

6 matches found

Cvelist
Cvelist
added 2026/06/01 3:27 p.m.22 views

CVE-2026-42672 WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection. This issue affects WP Directory Kit: from n/a through 1.5.1...

9.3CVSS0.00039EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/10 5:18 a.m.1 views

EUVD-2025-42672

Malicious code in patria-buburayam24-breki npm...

6.6AI score
Exploits0
Circl
Circl
added 2023/12/22 12:51 p.m.2 views

CVE-2023-42672

creationtimestamp| type| source ---|---|--- 2023-12-22 12:51:29+00:00| seen| https://t.me/ctinow/158356...

5.5CVSS5.5AI score0.00012EPSS
Exploits0References1
OSV
OSV
added 2023/12/04 1:15 a.m.1 views

CVE-2023-42672

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.5CVSS6.2AI score
Exploits0References1
Cvelist
Cvelist
added 2023/12/04 12:54 a.m.15 views

CVE-2023-42672

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.6AI score0.00012EPSS
Exploits0References1
CVE
CVE
added 2023/12/04 12:54 a.m.34 views

CVE-2023-42672

The CVE-2023-42672 entry concerns UNISOC/imsservice with a missing permission check, enabling an attacker to write permission usage records and cause local information disclosure without executing code. Affected component: imsservice in UNISOC chipsets. Root cause: absence of permission validatio...

5.5CVSS5.2AI score0.00012EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder